CVE-2025-21912

Summary

CVE-2025-21912 is a vulnerability in the Linux kernel affecting the gpio:rcar subsystem. It was identified during kernel debugging, where spurious messages about invalid context were observed when spinlock debugging was enabled. The root cause was the use of raw_spinlock to protect register access during gpio configuration. This lock is only used to serialize register access and is now being replaced with a more appropriate synchronization mechanism. The vulnerability may lead to unintended behavior in the kernel, potentially causing system instability or allowing unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.